Who we are
ExOS (“we”, “us”) operates this website at exos.is and is the controller of the personal data collected through it. This policy explains what data we collect, why we collect it, and the rights you have. Our processing is governed by the EU General Data Protection Regulation (GDPR) and the Icelandic Data Protection Act no. 90/2018.
The data we collect
We collect the information you give us, along with a small amount of technical data:
- Demo requests: name, email address, company, job title, company size, and any message you include in the form.
- Chat: anything you choose to share with us through the chat widget.
- Technical data: your IP address and basic browser information, used for security, abuse prevention, and anonymous usage statistics.
- Preferences: your language choice, stored in a session cookie.
How we use your data
We use this information to respond to demo requests and other inquiries, to operate and improve the website, and to protect it against abuse. The legal bases for this are steps taken at your request prior to entering into a contract, and our legitimate interests in running and securing the site. We never sell personal data and make no automated decisions about you.
Service providers
We rely on a small number of service providers who process data on our behalf:
- Cloudflare — content delivery and security in front of the website.
- DigitalOcean — hosting of the website and its database.
- Twilio SendGrid — delivery of internal email notifications when a demo request is submitted.
- Google Analytics — anonymous usage statistics.
- Intercom — the chat widget.
Some of these providers may process data outside the European Economic Area. Where they do, transfers are protected by safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.
Cookies
The website uses a session cookie to remember your language choice (and to sign administrators in). Google Analytics and Intercom set their own cookies to distinguish visitors and keep chat conversations connected. You can block or delete cookies in your browser settings; the site remains usable without them.
Data retention
Demo requests are kept for as long as needed to follow up and maintain our business relationship, and are deleted when no longer required or upon your request. Security and server logs are kept for a short period and then discarded.
Your rights
You have the right to access the personal data we hold about you, and to have it corrected, deleted, or handed over in a portable format. You can also object to our processing or ask us to restrict it. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is), or with the supervisory authority in your own country.
Changes to this policy
We may update this policy as the website or our services change. The date at the top shows when it was last revised, and meaningful changes will be visible on this page.
Contact
Questions about this policy or your personal data can be sent to [email protected].